PHP - Retaining Customer Entered Data When Form Submission Fails On Bad Data

Hi,

I want to pull data from db, where sometimes all rows and sometimes rows matching given "username".

Here is my code:

	//Grab Username of who's Browsing History needs to be searched. 
	if (isset($_GET['followee_username']) && !empty($_GET['followee_username'])) 
{ 
    $followee_username = $_GET['followee_username']; 
    
    if($followee_username != "followee_all" OR "Followee_All") 
    { 
        $query = "SELECT * FROM browsing_histories WHERE username = \"$followee_username\""; 
        $query_type = "followee_username"; 
        $followed_word = "$followee_username"; 
        $follower_username = "$user"; 
        echo "$followee_username"; 
    } 
    else 
    { 
        $query = "SELECT * FROM browsing_histories"; 
        $query_type = "followee_all"; 
        $followed_word = "followee_all"; 
        $follower_username = "$user"; 
        echo "all"; 
    } 
} 
	

 

When I specify a "username" in the query via the url:

browsing_histories_v1.php?followee_username=requinix&page_number=1

I see result as I should. So far so good.

 

Now, when I specify "all" as username then I see no results. Why ? All records from the tbl should be pulled!

browsing_histories_v1.php?followee_username=all&page_number=1

This query shouldv'e worked:

	$query = "SELECT * FROM browsing_histories"; 
	

So I built a form and if anyone puts // in the text area field named Code: [Select]
name="background" it won't work... it fails.

This prevents users from entering website URLs, which is an issue since the form is related to website design.  I think I have everything else working just fine.

Any ideas how I can change this so it will work and allow // ?  There may be other things that cannot be entered or maybe a security risk I am missing... here is the code...

Code: [Select]
<?php

    // version 2.2

    // All placeholders that are used such as {yourEmail@yourDomain.com}, {yourSolve360Token}, {ownership},
    // {categoryId}, {templateId} should be replaced with real values without the {} brackets.

    // REQUIRED Edit with the email address you login to Solve360 with
    define('USER', 'me@me.com');
    // REQUIRED Edit with token, Workspace > My Account > API Reference > API Token                             
    define('TOKEN', 'itentionallydeleted');  
    
    // Get request data
    $requestData = array();
    parse_str($_SERVER['QUERY_STRING'], $requestData);
    
    // Configure service gateway object
    require 'Solve360Service.php';
    $solve360Service = new Solve360Service(USER, TOKEN);
    
    //
    // Preparing the contact data
    //
    
    $contactFields = array(
        // field name in Solve360 => field name as specified in html form
        'firstname' => 'firstname',
        'lastname' => 'lastname',
        'businessemail' => 'businessemail',
        'cellularphone' => 'cellularphone',
        'background' => 'background',
    );
    
    
    // kill form if spammers use the siteURL field
if ( $_GET['url'] != '' || $_GET['firstname'] == 'Your Name' || $_GET['businessemail'] == 'Email Address' ) {header("Location: http://www.openpotion.com/new/error");}   
    
    else {
    $contactData = array(
        // OPTION Apply category tag(s) and set the owner for the contact to a group
        // You will find a list of IDs for your tags, groups and users in Workspace > My Account > API Reference
        // To enable this option, uncomment the following:

       
        // Specify a different ownership i.e. share the item
        'ownership'     => 18634876,

        // Add categories
        'categories'    => array(
            'add' => array('category' => array(18660073))
        ),

    );
    
    
    // adding not empty fields
    
    foreach ($contactFields as $solve360FieldName => $requestFieldName) {
        if ($requestData[$requestFieldName]) {
            $contactData[$solve360FieldName] = $requestData[$requestFieldName];
        }
    }
    
    // 
    // Saving the contact
    //
    // Check if the contact already exists by searching for a matching email address.
    // If a match is found update the existing contact, otherwise create a new one.
    //
    
    $contacts = $solve360Service->searchContacts(array(
        'filtermode' => 'byemail',
        'filtervalue' => $contactData['businessemail'],
    ));
    if ((integer) $contacts->count > 0) {
        $contactId = (integer) current($contacts->children())->id;
        $contactName = (string) current($contacts->children())->name;
        $contact = $solve360Service->editContact($contactId, $contactData);
    } else {
        $contact = $solve360Service->addContact($contactData);
        $contactName = (string) $contact->item->name;
        $contactId   = (integer) $contact->item->id;        
    }

    if (isset($contact->errors)) {
        // Mail yourself if errors occur  
        mail(
            USER, 
            'Error while adding contact to Solve360', 
            'Error: ' . $contact->errors->asXml()
        );
        die ('System error');
    } else {
        // Mail yourself the result
        mail(
            USER, 
            'A new sales lead has been posted to Solve360', 
            'Contact "' . $contactName . '" https://secure.solve360.com/contact/' . $contactId . ' was posted to Solve360',
            'From: noreply@openpotion.com' . PHP_EOL . 'Reply-To: ' . $contactData['businessemail'] . PHP_EOL . 'X-Mailer: PHP/' . phpversion()
        );
    }
    
    //
    // OPTION Adding a activity 
    //
    
    /*
     * You can attach an activity to the contact you just posted
     * This example creates a Note, to enable this feature just uncomment the following request
     *      
     */    
    
   /*
    // Preparing data for the note
    $noteData = array(
        'details' => nl2br($requestData['note'])
    );

    $note = $solve360Service->addActivity($contactId, 'note', $noteData);
    
    // Mail yourself the result
    mail(
        USER, 
        'Note was added to "' . $contactName . '" contact in Solve360',
        'Note with id ' . $note->id . ' was added to the contact with id ' . $contactId
    );
    // End of adding note activity
*/
 
    //
    // OPTION Inserting a template of activities
    //
    
    /*
     * You can also insert a template directly into the contact you just posted
     * You will find a list of IDs for your templates in Workspace > My Account > API Reference
     * To enable this feature just uncomment the following request
     *      
     */

    /*
    // Start of template request
    $templateId = {templateId};
    $template = $solve360Service->addActivity($contactId, 'template', array('templateid' => $templateId));
        
    // Mail yourself the result
    mail(
        USER, 
        'Template was added to "' . $contactName . '" contact in Solve360',
        'Template with id ' . $templateId . ' was added to the contact with id ' . $contactId
    );
    // End of template request
    */
    header("Location: http://www.website.com/thank-you");
    
    }

?>


Thanks a ton in advance!
Jason



[attachment deleted by admin]

I am adding line items in my invoice script, while adding i validate the data. if validation fails, it will display error message with entered data filled in the form. If it clears the validation, data gets submitted to database and displays the same . Here i can add many line items, so this process should keep repeating.

Everything is working fine. But when the form submits it should display error in one place and display the submitted data in other place.

Here is my form

 

<form action="" method="post">
                                        <div class="form-row">
                                            <div class="col-md-4 mb-30">
                                                <label for="validationDefault01">Select Customer</label>
                                            <select name="customer" class="form-control" id="validationDefault01" required>
                                            <option value=""></option>
                                            <?php $c1 = mysqli_query($con, "SELECT * FROM customers WHERE status='Active'") or die (mysqli_error($con));
                                            while($c2 = mysqli_fetch_array($c1))
                                            {
                                                ?>
                                           
                                            <option value="<?php echo $c2["cid"]; ?>" <?php if($c2["cid"] == $_POST['customer'] ) { echo "selected"; }  ?> ><?php echo $c2["name"]; ?></option>
                                            <?php } ?>
                                            </select>    
                                            </div>

 
  <div class="col-md-4 mb-30">
  <label for="validationDefault02">Date</label>
 <input type="text" class="form-control" name="edate" id="datepicker" value="<?php echo isset($_POST["edate"]) ? $_POST["edate"] : $today; ?>" required />  
  </div>
  </div>                               
<!-- line item -->                               
                               <div class="table-responsive">
                             <table class="table table-active table-bordered table-sm">
                             <thead class="thead-active">

                              <tr>
                             <th>Name</th>
                            <th>Description</th>
                            <th>UOM</th>    
                            <th>Price</th>
                            <th>Stock</th>
                            <th>Qty</th>  
                            </tr>
                           </thead> 
                            <tr> 
  <td><input type="text"  id="productname" name="productname" value="<?php echo isset($_POST["productname"]) ? $_POST["productname"] : ''; ?>" required ></td> 
                               <input type="hidden"  id="productcode" name="productcode" value="<?php echo isset($_POST["productcode"]) ? $_POST["productcode"] : ''; ?>"  />
                                <td><textarea id="description" name="description"><?php echo isset($_POST["description"]) ? $_POST["description"] : ''; ?></textarea></td>
                                
                           
                                <td><select name="uom" id="uom">
                               
                                <?php $su1 = mysqli_query($con, "select * from uom");  while($su2 = mysqli_fetch_array($su1)) { 
                   
                                ?>
                                <option value="<?php echo $su2["uom_name"]; ?>" <?php if($su2["uom_name"] == $_POST['uom'] ) { echo "selected"; }  ?> ><?php echo $su2["uom_name"]; ?></option>
                                
                                <?php
                                }  
                                ?>
                                </select>
                               
                               </td> 
                               
                             <td><input type="text" required id="price" name="price"   value="<?php echo isset($_POST["price"]) ? $_POST["price"] : ''; ?>" /></td>
                             
              <td><input type="text" readonly id="stock" name="stock" value="<?php echo isset($_POST["stock"]) ? $_POST["stock"] : ''; ?>" /></td>            
                    
                   <td><input type="text"  required id="quantity" name="quantity" value="<?php echo isset($_POST["quantity"]) ? $_POST["quantity"] : ''; ?>" /></td>  
                                                       
</tr>  </table> 

<!-- line item ends--->
 <div class="form-row">
<div class="col-md-4 mb-30">
 <input name="add" class="btn btn-success" type="submit" value="Add" />
</div>
</div>                                            
</form>

form submission

<?php
 if(isset($_POST['add']))
 {
   
   
$customer = $_POST['customer'];
$edate1 = $_POST['edate'];
$edate = date('Y-m-d', strtotime((str_replace('/','-',$edate1))));
	                                            
$pname = $_POST['productname'];
$pcode = $_POST['productcode'];
$uom = $_POST['uom'];
$price = $_POST['price'];
$quantity = $_POST['quantity'];

$pc = mysqli_query($con, "SELECT min_price FROM items WHERE item_id=".$pcode."") or die (mysqli_error($con));
$prow = mysqli_fetch_array($pc);

   // This error part should be displayed inside <div id="error"></div> which is above the form 
if($price<$prow['min_price'])
{
echo  '<div class="alert alert-inv alert-inv-danger alert-wth-icon alert-dismissible fade show" role="alert">
                                        <span class="alert-icon-wrap"><i class="zmdi zmdi-bug"></i></span> Price should not be lesser than minimum price defined.
                                        <button type="button" class="close" data-dismiss="alert" aria-label="Close">
                                            <span aria-hidden="true">×</span>
                                        </button>
                                    </div>';   
}
else
{
  //data gets inserted into invoice table and displays submited data in table format
  // this part should be displayed below the form inside <div id="success"></div>
  
  
}
                        }

Here i am not getting how to define that displays. 

 

 

 

I built a address book for customers and i realize now im not sure the best way to allow the customer to edit/delete their addresses, but stopping them from pulling/editing other customers info.

Even if i use post data only they could still view the page source and see the address ID being posted to the next page and change it, to see or edit someone elses data...

Should i encrypt the ID? Is that even good enough?

Im using PHP/MYSQL

Here is my code for entering data into the database
Code: [Select]
<?php
ini_set("display_errors",false);
$link = mysql_connect('mysql5.000webhost.com', 'a9634375_dragons', 'samantha8',true); if (!$link) {      die('Could not connect: ' . mysql_error()); }
mysql_select_db("a9634375_dragons") or die(mysql_error());
$ids=$_GET['checkboxes'];

$user = $_GET['user'];
$young = unserialize(file_get_contents('http://www.dragcave.net/api/samantha8/serialize/user/'.$user.''));

foreach ($young['dragons'] as $key => $value) {
$querya = "DELETE FROM hatch WHERE code='$key'";
$queryb = "DELETE FROM er WHERE code='$key'";
$queryc = "DELETE FROM eggs WHERE code='$key'";
mysql_query($querya);
mysql_query($queryb);
mysql_query($queryc);
}
echo '<br>Dragons updated.<br>';
 echo 'Dragons now entered:<br>';
foreach ($ids as $hey) {
echo '<br><a href="http://www.dragcave.net/view/'.$hey.'" target="frame1"><img src="http://www.dragcave.net/image/'.$hey.'.gif" border="0"></a>&nbsp;';

$data = unserialize(file_get_contents('http://www.dragcave.net/api/samantha8/serialize/view/'.$hey.''));
$hrsleft = $data['dragons'][$hey]['hoursleft'];
$hatch = $data['dragons'][$hey]['hatch'];

if ($hrsleft < 96) {
$query3 = "INSERT INTO er(code) VALUES('$hey')";
mysql_query($query3);
echo 'Dragon has been entered into the ER.<br>';
}
else
{
if  (! $hatch) {
$query4 = "INSERT INTO eggs(code) VALUES('$hey')";
mysql_query($query4);
echo 'Egg has been entered into the Nest.<br>';
}
else
{
$query2 = "INSERT INTO hatch(code) VALUES('$hey')";
mysql_query($query2);
echo 'Hatchling has been entered into the Nursery.<br>';
}
}
}

?>
My table is simply set up with three fields
er
egg
hatch

What am I doing wrong?
Thank you in advance!

Hello,   I'm working on a project that requires me to have stock / fake demo files that will be replaced with real files provided by users... I need something to take space and then when people actually start using the site and inputting data, then I can replace each file with new, unique files.   I have some idea of how this would work. I would need incremented or non-matching identifiers and then a script that probably works on an if statement    like   If new data, take first list of data, delete, replace with new data. Something like that. 

Hi i m new with php.
i entered data in fckeditor ,now i want to save that data in file with.html extension.
please anybody has idea then help me....

Hi, I have been trying to get the below code to work but without luck for the past couple of days.

Can anyone help point out where i am going wrong.

I have a webpage that has several buttons which will eventually let users search for data stored in different tables of a postgresql database ( i have simplified the code here to just two buttons).

When the user clicks the Search for hostname button a form is displayed letting them type in their search criteria.

Upon clicking the submit button i am able to access the users search strings with no problem but i cannot get the original search form to display above the search results additonaly including the users original search strings.

Any help on this would be much appreciated as i am pulling my hair out, as you can probably guess i am very new to PHP/HTML

My code is


<? 
session_start(); 
?>

<form method="POST" action="<? echo $_SERVER['PHP_SELF'];?>">
<center>
<button type="submit" id="green_button" name="searchhostname">Search for Hostname</button>
<button type="submit" id="green_button" name="searchipaddress">Search for IP address</button>
</center>
</form>
</body>




<?
// If user clicks the search hostname button display the additonal search form
if ($_POST['searchhostname'])
{
echo "Search for Hostnames and IP Addresses:<br><br>";
echo "<form method='POST' action='".$_SERVER['PHP_SELF']."'>";
echo "Hostname: <input type='text' name='hostname' size='16' value='".$_POST['hostname']."'/>";
echo "<br>";   
echo "Operating System: <input type='text' name='ostype' size='16' value='".$_POST['ostype']."'/>";
echo "<br>";
echo "<input type='submit' id='green_button' value='Search' name='runsearch'><br><br>";
echo"</form>";


}

// If user has entered criteria to search on run the search but alos display the original search form above
// and any data the user has entered before displaying results

if ($_POST['runsearch'])
{
//In reality this is where the users search data will be compared to a postresql database....

echo "You want to search for hostname: ".$_POST['hostname']."<br>";
echo "You want to search for operating system: ".$_POST['ostype']."<br>";
}


?>

Hello guy , how do I write PHP page that have table to list all the data I entered to my system.    

I've put together a very simple form & processing script for my site.. Everything works great except the body of the email i receive when the form is submitted contains everything but the info that has been entered into the fields. I'm sure it's something simple that I'm overlooked, but I'm officially stumped.  What am I doing wrong here? 
<?php
$mymail = 'ordietryingodt@yahoo.com';
$cc = 'New Recruit To Add!';
$BoDy = ' ';
$FrOm = 'FROM:' .$_POST['t1'];
$FrOm .= 'Reply-To:' .$_POST['t1'];
$FrOm .= 'X-MAILER: PHP'.phpversion();
$BoDy .= 'Quake Live Name: ';
$BoDy .= $_POST['t1'];
$BoDy .= "\n";
$BoDy .= 'Age: ';
$BoDy .= $_POST['t2'];
$BoDy .= "\n";
$BoDy .= 'Residing Country: ';
$BoDy .= $_POST['t3'];
$BoDy .= "\n";
$BoDy .= 'Favorite Game Type: ';
$BoDy .= $_POST['t4'];
$BoDy .= "\n";
$send = mail("$mymail", "$cc", "$BoDy", "$FrOm");

if($send)
{
echo '<html><head>';
echo '<meta http-equiv="refresh" content="0;URL=/submitted.htm">';
echo '</head><body>Email send....';
echo '</body></html>';
}
?>

hello dear experts   good day

dear friend - i need your help.

import urllib
import urlparse
import re
# import peewee
import json
from peewee import *



#from peewee import MySQLDatabase ('cpan', user='root',passwd='rimbaud')


db = MySQLDatabase('cpan', user='root',passwd='rimbaud')

class User(Model):
    name = TextField()
    cname = TextField()
    email = TextField()
    url = TextField()

    class Meta:
        database = db # this model uses the cpan database


User.create_table() #ensure table is created


url = "http://search.cpan.org/author/?W"
html = urllib.urlopen(url).read()
for lk, capname, name in re.findall('<a href="(/~.*?/)"><b>(.*?)</b></a><br/><small>(.*?)</small>', html):
    alk = urlparse.urljoin(url, lk)

    data = { 'url':alk, 'name':name, 'cname':capname }

    phtml = urllib.urlopen(alk).read()
    memail = re.search('<a href="mailto:(.*?)">', phtml)
    if memail:
        data['email'] = memail.group(1)


data = json.load('email') #your json data file here

for entry in data: #assuming your data is an array of JSON objects
    user = User.create(name=entry["name"], cname=entry["cname"],
        email=entry["email"], url=entry["url"])
    user.save()

guess that there a data-file must exist: one that have been created by the script during the parsing... is this right?

)
martin@linux-70ce:~/perl> python cpan_100.py
Traceback (most recent call last):
  File "cpan_100.py", line 47, in <module>
    data = json.load('email') #your json data file here
  File "/usr/lib/python2.7/json/__init__.py", line 286, in load
    return loads(fp.read(),
AttributeError: 'str' object has no attribute 'read'
martin@linux-70ce:~/perl>

this script does not work



 

)
martin@linux-70ce:~/perl> python cpan_100.py
Traceback (most recent call last):
  File "cpan_100.py", line 47, in <module>
    data = json.load('email') #your json data file here
  File "/usr/lib/python2.7/json/__init__.py", line 286, in load
    return loads(fp.read(),
AttributeError: 'str' object has no attribute 'read'
martin@linux-70ce:~/perl>

well i suppose that in the first part of the script - the parser - part we parse data and - therefore we should create a file.
I guess that this file is taken up within the second part of the script...

load data .

well why the script does not work!?
 

I have a form on our website that a user can fill out for custom product.  I want the form data to be 1) stored into a mysql database AND after storing said data, 2) email the same data to our sales department.

1)  The form data DOES get stored into mysql database (except for the first two fields, for some weird reason)

2) I added a "mail" section to the php file that stores the data into the database, but it is not working correctly.  I have stripped the email portion down to sending just one of the fields in the "message" to make it easier for troubleshooting

I have included here, both the form section of the html file, and the formdata.php file that processes the data for your  analysis.  I am relatively new to php so there are going to be some issues with security, but I can work on those after I get the store & email process to work correctly.  Please review my code and see if anyone can be of assistance.  I looked through the forums and couldn't find another issue that was the same as mine.  If I just overlooked, please tell me the thread post #.  Thanks

THE FORM WHICH COLLECTS THE DATA
*******************************
<form method=POST action=formdata.php>

                 
  <table width="640" border=0 align="center">
    <tr>
      <td align=right><b>First Name</b></td>
      <td><input type=text name=FName size=25></td>
      <td><div align="right"><b>Telephone</b></div></td>
      <td><input type=text name=Tel size=25></td>
    </tr>
    <tr>
      <td align=right><b>Last Name</b></td>
      <td><input type=text name=LName size=25></td>
      <td><div align="right"><b>Fax</b></div></td>
      <td><input type=text name=Fax size=25></td>
    </tr>
    <tr>
      <td align=right><b>Title</b></td>
      <td><input type=text name=Title size=25></td>
      <td><div align="right"><b>Email</b></div></td>
      <td><input type=text name=Email size=50></td>
    </tr>
    <tr>
      <td align=right><b>Company</b></td>
      <td><input type=text name=Comp size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Address</b></td>
      <td><input type=text name=Addr size=25></td>
      <td><div align="right"><b>Estimated Annual Volume</b></div></td>
      <td><input type=text name=EAV size=25></td>
    </tr>
    <tr>
      <td align=right><b>City</b></td>
      <td><input type=text name=City size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>State/Province</b></td>
      <td><input type=text name=SProv size=25></td>
      <td><div align="right"><b>Application</b></div></td>
      <td><input type=text name=Appl size=25></td>
    </tr>
    <tr>
      <td align=right><b>Country</b></td>
      <td><input type=text name=Ctry size=25></td>
      <td><div align="right"><b>Type of System</b></div></td>
      <td><input type=text name=Syst size=25></td>
    </tr>
    <tr>
      <td align=right><b>Zip/Postal Code</b></td>
      <td><input type=text name=ZPC size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td><div align="right"><strong><font color="#FFFF00" face="Arial, Helvetica, sans-serif">COIL
          DESIGN</font></strong></div></td>
      <td><font color="#FFFF00" face="Arial, Helvetica, sans-serif"><strong>PARAMETERS</strong></font></td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Primary Resistance (ohms)</b></td>
      <td><input type=text name=Pres size=25></td>
      <td><div align="right"><b>Primary Inductance (mH)</b></div></td>
      <td><input type=text name=Pind size=25></td>
    </tr>
    <tr>
      <td align=right><b>Secondary Resistance (ohms)</b></td>
      <td><input type=text name=Sres size=25></td>
      <td><div align="right"><b>Secondary Inductance (H)</b></div></td>
      <td><input type=text name=Sind size=25></td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Peak Operating Current (Amps)</b></td>
      <td><input type=text name=POC size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Output Energy (mJ)</b></td>
      <td><input type=text name=Egy size=25></td>
      <td><div align="right"><b>Output Voltage (kV)</b></div></td>
      <td><input type=text name=Volt size=25></td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b># HV Towers per Coil</b></td>
      <td><input type=text name=TPC size=25></td>
      <td><div align="right"><b># of Coils per Package</b></div></td>
      <td><input type=text name=CPP size=25></td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <th colspan=4><b>Please enter any additional information he </b></th>
    </tr>
    <tr>
      <th colspan=4><textarea name=Mess cols=50 rows=10 id="Message"></textarea></th>
    </tr>
  </table>
  </dl>
  <div align="center">
    <p>
      <input type=hidden name=BodyTag value="&lt;body  bgcolor=&quot;#484589&quot; text=&quot;#FFFFFF&quot; link=&quot;#FFFF00&quot; alink=&quot;#FFFFFF&quot; vlink=&quot;#FF7F00&quot;&gt;">
      <input type=hidden name=FA value=SendMail>
    </p>
    <p><font color="#FFFF00" face="Arial, Helvetica, sans-serif"><strong>PLEASE MAKE SURE ALL
      INFORMATION<br>
      IS CORRECT BEFORE SUBMITTING</strong></font></p>
    <p>
      <input type=submit value="Submit Form">
    </p>
  </div>
</form>
THE FILE THAT PROCESSES THE FORM DATA (formdata.php)
***********************************************
<?php
$con = mysql_connect("localhost","XXX","XXX");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("customform", $con);

$sql="INSERT INTO formdata (Fname, Lname, Title, Comp, Addr, City, SProv, Ctry, ZPC, Tel, Fax, Email, EAV, Appl, Syst, Pres, Pind, Sres, Sind, POC, Egy, Volt, TPC, CPP, Mess)
VALUES ('$_POST[Fname]','$_POST[Lname]','$_POST[Title]','$_POST[Comp]','$_POST[Addr]','$_POST[City]','$_POST[SProv]','$_POST[Ctry]','$_POST[ZPC]','$_POST[Tel]','$_POST[Fax]','$_POST[Email]','$_POST[EAV]','$_POST[Appl]','$_POST[Syst]','$_POST[Pres]','$_POST[Pind]','$_POST[Sres]','$_POST[Sind]','$_POST[POC]','$_POST[Egy]','$_POST[Volt]','$_POST[TPC]','$_POST[CPP]','$_POST[Mess]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "Your Information Was Successfully Posted";

mysql_close($con);

$to = "recipient email address here"; 
$subject = "Custom Form"; 
$email = $_POST['Email'] ; 
$message = $_POST['Comp'] ; 
$headers = "From: $Email"; 
$sent = mail($to, $subject, $message, $headers) ; 
if($sent) 
{print "Your mail was sent successfully"; }
else 
{print "We encountered an error sending your mail"; }
?>

I'm in the process of making a network for investors and entrepreneurs. When they access their profile page, select edit and go to editprofile.php a problem arises with the data base submission. I have the data they have previously inputted being echoed back out to the user. This lets the user see what they have inputted so that they can make changes to their profile. Unfortunately, with my radio buttons, if no changes are made and the user hits submit, the radio buttons return a value of 'unchecked'. I need them to maintain the value previously submitted to the database if the radio button isn't 'checked'. I'm not sure exactly how to do this.

You can test it out yourself by going to http://network.jasonbiondo.com

Code is below:

Code: [Select]
?php

session_start();

require ('connect.php');

include ('header.php');

$savechanges = $_POST['savechanges'];

$firstname = strip_tags($_POST['firstname']);
$lastname = strip_tags($_POST['lastname']);
$username = strtolower(strip_tags($_POST['username']));
$email = strip_tags($_POST['email']);
$password = strip_tags($_POST['password']);
$repeatpassword = strip_tags($_POST['repeatpassword']);
$entrepreneur = 'unchecked';
$investor = 'unchecked';
$date = date("Y-m-d");
$companyname = strip_tags($_POST['companyname']);
$companywebsite = strip_tags($_POST['companywebsite']);
$founder = strip_tags($_POST['founder']);
$phone = strip_tags($_POST['phone']);
$address = strip_tags($_POST['address']);
$city = strip_tags($_POST['city']);
$state = strip_tags($_POST['state']);
$zipcode = strip_tags($_POST['zipcode']);
$country = strip_tags($_POST['country']);
$development = strip_tags($_POST['development']);
$capitalamount = strip_tags($_POST['capitalamount']);
$companydo = strip_tags($_POST['companydo']);
$founderbuilt = strip_tags($_POST['founderbuilt']);
$whatsnew = strip_tags($_POST['whatsnew']);
$understand = strip_tags($_POST['understand']);
$competition = strip_tags($_POST['competition']);
$money = strip_tags($_POST['money']);
$demo = strip_tags($_POST['demo']);
$incorporation = strip_tags($_POST['incorporation']);
$companynameinv = strip_tags($_POST['companynameinv']);
$phoneinv = strip_tags($_POST['phoneinv']);
$addressinv = strip_tags($_POST['addressinv']);
$cityinv = strip_tags($_POST['cityinv']);
$stateinv = strip_tags($_POST['stateinv']);
$zipcodeinv = strip_tags($_POST['zipcodeinv']);
$countryinv = strip_tags($_POST['countryinv']);
$angel = strip_tags($_POST['angel']);
$vc = strip_tags($_POST['vc']);
$capital = strip_tags($_POST['capital']);

if ($savechanges)

{

$queryreg = mysql_query("UPDATE users SET

   `firstname` = '$firstname',
   `lastname` = '$lastname',
   `email` = '$email',
   `entrepreneur` = '$entrepreneur',
   `investor` = '$investor',
   `companyname` = '$companyname',
   `companywebsite` = '$companywebsite',
   `founder` = '$founder',
   `phone` = '$phone',
   `address` = '$address',
   `city` = '$city',
   `state` = '$state',
   `zipcode` = '$zipcode',
   `country` = '$country',
   `development` = '$development',
   `capitalamount` = '$capitalamount',
   `companydo` ='$companydo',
   `founderbuilt` = '$founderbuilt',
   `whatsnew` = '$whatsnew',
   `understand` = '$understand',
   `competition` = '$competition',
   `money` = '$money',
   `demo` = '$demo',
   `incorporation` = '$incorporation',
   `companynameinv` = '$companynameinv',
   `phoneinv` = '$phoneinv',
   `addressinv` = '$addressinv',
   `cityinv` = '$cityinv',
   `stateinv` = '$stateinv',
   `zipcodeinv` = '$zipcodeinv',
   `countryinv` = '$countryinv',
   `angel` = '$angel',
   `vc` = '$vc',
   `capital` = '$capital'
   
   WHERE username=  '" . $_SESSION['username'] . "'
   
   ");
   
   $selected_radio_selector = $_POST['selector'];
    $selected_radio_invtype = $_POST['invtype'];
     
   if ($selected_radio_selector == 'entrepreneur')
      {
         $entrepreneur = 'checked';
         
      }
      else if ($selected_radio_selector == 'investor')
      {
         $investor = 'checked';
         
         if ($selected_radio_invtype == 'angel')
         {
            $angel = 'checked';
            $vc = 'unchecked';
         
         }
         else if ($selected_radio_invtype == 'vc')
         {
            $vc = 'checked';
            $angel = 'unchecked';
         }
         else
         {
         die("Please select what type of investor you are!");
         }
      }
   
}

$q = mysql_query("SELECT `firstname`, `lastname`, `firstname`, `lastname`, `email`, `entrepreneur`, `investor`, `companyname`, `companywebsite`, `founder`, `phone`, `address`, `city`, `state`, `zipcode`, `country`, `development`, `capitalamount`, `companydo`, `founderbuilt`, `whatsnew`, `understand`, `competition`, `money`, `demo`, `incorporation`, `companynameinv`, `phoneinv`, `addressinv`, `cityinv`, `stateinv`, `zipcodeinv`, `countryinv`, `angel`, `vc`, `capital` FROM `users` WHERE username=  '" . $_SESSION['username'] . "'");

$r = mysql_fetch_assoc($q);

?>

<script type="text/javascript" src="../assets/js/editprofile.js"></script>

<form action='editprofile.php' method="POST" id="form">

   <fieldset>

      <p id="required"> * Required Fields</p>

      <p class="fieldSpacing">

         <label for="firstname" class="leftcolalign">First Name *</label>

         <input id="firstname" class="rightcolalign" name="firstname" value='<?php echo $r['firstname']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="lastname" class="leftcolalign">Last Name *</label>

         <input id="lastname" class="rightcolalign" name="lastname" value='<?php echo $r['lastname'];?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="username" class="leftcolalign">User Name *</label>

         <?php echo $_SESSION['username']; ?>

      </p>

      <p class="fieldSpacing">

         <label for="email" class="leftcolalign">Email *</label>

         <input id="email" class="rightcolalign" name="email" value='<?php echo $r['email']; ?>''/>

      </p>

      <p class="fieldSpacing">

         <label for="selector" class="leftcolalign">What am I? *</label>

         <input id="entButton" class="radioalign" type="radio" name="selector" value="entrepreneur"<?php echo $r['entrepreneur']; ?>/>

         <label for="entrepreneur" id="entrepreneur">Entrepreneur</label>

         <input id="invButton" class="radioalign" type="radio" name="selector" value="investor"<?php echo $r['investor']; ?>/>

         <label for="investor" id="investor">Investor</label>

      </p>

   </fieldset>

   <fieldset id="entForm">

      <p class="fieldSpacing">

         <label for="companyname" class="leftcolalign">Company Name: *</label>

         <input id="companyname" class="rightcolalign" name="companyname" value='<?php echo $r['companyname']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="companywebsite" class="leftcolalign">Company Website:</label>

         <input id="companywebsite" class="rightcolalign" name="companywebsite" value='<?php echo $r['companywebsite']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="founder" class="leftcolalign">Founder(s): *</label>

         <input id="founder" class="rightcolalign" name="founder" value='<?php echo $r['founder']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="phone" class="leftcolalign">Phone Number(s): *</label>

         <input id="phone" class="rightcolalign" name="phone" value='<?php echo $r['phone']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="address" class="leftcolalign">Address: *</label>

         <input id="address" class="rightcolalign" name="address" value='<?php echo $r['address']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="city" class="leftcolalign">City: *</label>

         <input id="city" class="rightcolalign" name="city" value='<?php echo $r['city']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="state" class="leftcolalign">State:</label>

         <input id="state" class="rightcolalign" name="state" value='<?php echo $r['state']; ?>'/>

      </p>

      <p class="fieldSpacing">

         <label for="zipcode" class="leftcolalign">Zip Code:</label>

         <input id="zipcode" class="rightcolalign" name="zipcode" value='<?php echo $r['zipcode']; ?>'/>

      </p>

Say there is a complex opt in process where people start to enter their data but certain questions stop them where they close out of the page. They already entered their data and I feel there is a way to grab it and post it to mysql even though they do not click submit.   How would this be done?   A super simple example (proof of concept) or a link to a tutorial would be very useful.
Edited by brentman, 23 September 2014 - 10:42 AM.

Hello to all,

I have problem figuring out how to properly display data fetched from MySQL database in a HTML table.

In the below example I am using two while loops, where the second one is nested inside first one, that check two different expressions fetching data from tables found in a MySQL database. The second expression compares the two tables IDs and after their match it displays the email of the account holder in each column in the HTML table.

The main problem is that the 'email' row is displayed properly while its while expression is not nested and alone(meaning the other data is omitted or commented out), but either nested or neighbored to the first while loop, it is displayed horizontally and the other data ('validity', 'valid_from', 'valid_to') is not displayed.'

Can someone help me on this, I guess the problem lies in the while loop?
Here is part of the HTML code:

<thead>
 <tr>
 <th data-column-id="id" data-type="numeric">ID</th>
 <th data-column-id="email">Subscriber's Email</th>
 <th data-column-id="validity">Validity</th>
<th data-column-id="valid_from">Valid From</th>
 <th data-column-id="valid_to">Valid To</th>
</tr>
</thead>

Here is part of the PHP code:

 

    <?php
    while($row = $stmt->fetch(PDO::FETCH_ASSOC))
    {
        echo '
            <tr>
                <td>'.$row["id"].'</td>
        ';
        while ($row1 = $stmt1->fetch(PDO::FETCH_ASSOC)) {
        echo '
                <td>'.$row1["email"].'</td>
        ';
        }
        if($row["validity"] == 1) {
            echo '<td>'.$row["validity"].' month</td>';
        }else{
            echo '<td>'.$row["validity"].' months</td>';
        }
        echo '  <td>'.$row["valid_from"].'</td>
                <td>'.$row["valid_to"].'</td>
        </tr>';
    }
    ?>

P.S. Please know that I have purposely omitted the connection part and the methods in the class that are used in this code to keep the spot of the problem as clean as possible. If you need me to rephrase the question, please ask.

Thank you.